Privacy Policy

Outward Voyage is run by Francisco Duarte Ferraz, in Portugal, who is the controller of your data. For any privacy question, message @outward_voyage on Instagram.

Orders are placed by Instagram message. In that chat we ask for what we need to send your order: your name, shipping address and, if you want an invoice with your tax number, your NIF.

• Why: to prepare, ship and invoice your order.
• Legal basis: performing the sales contract (GDPR art. 6(1)(b)) and meeting tax obligations (art. 6(1)(c)).
• How long: shipping details until the order is delivered and the return period has ended; invoices for as long as Portuguese tax law requires (10 years).

The cart on this site is stored only in your browser. It doesn’t reach us until you send it by message.

To play the daily challenge we ask for your Instagram username. We keep:

• your @, the countries you guessed and your scores;
• whether you agreed to show your @ on the public leaderboard.

• Why: to run the monthly leaderboard and to message the winner on Instagram about the prize.
• Legal basis: your consent (GDPR art. 6(1)(a)), given when you choose to play and, separately, when you tick the option to show your @. Without it you appear on the board with your @ hidden (e.g. “fr•••”).
• How long: each day’s guesses are deleted after 40 days; monthly scores after 12 months.
• Age: you must be 13 or older to play.

You can withdraw consent at any time: play again with the option unticked, or message us to delete your challenge data.

We only use what the site needs to work:

• ov_player (cookie, 26 hours): ties your browser to the @ you played as today, so the same day can’t be replayed under another name.
• Local storage: your cart, the @ you play as and whether you’ve played today. It stays in your browser; you can clear it in your browser settings.

We don’t use advertising or analytics cookies.

• Hetzner Online GmbH (Germany): hosts the site and the challenge data, on servers in the European Union.
• Meta / Instagram: when you message us, the chat goes through Instagram and is covered by Meta’s privacy policy, which may transfer data outside the EU.
• Carrier (e.g. CTT): receives your name and address to deliver your order.

You can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw consent whenever you like. Send your request to @outward_voyage on Instagram; we reply within one month.

If you think we haven’t handled your data properly, you can complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).

If we change this policy, we’ll update this page and the date at the top.